Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/9eCzwYwzlsFlKvnkn5CfY6h8aRU.roa
File: 9eCzwYwzlsFlKvnkn5CfY6h8aRU.roa (raw, json)
Hash identifier: KBqaiM3qB+JdR/4QQlpyVinM8pOzBzsTXvecH+q5ddA=
Subject key identifier: F5:E0:B3:C1:8C:33:96:C1:65:2A:F9:E4:9F:90:9F:63:A8:7C:69:15
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 0186986F70ED2ACE3A4246E9106CE3857F4F
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/9eCzwYwzlsFlKvnkn5CfY6h8aRU.roa
Signing time: Tue 28 Feb 2023 14:31:25 +0000
ROA not before: Tue 28 Feb 2023 14:31:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398395
IP address blocks: 45.67.87.0/24 maxlen: 24
45.134.110.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 22 Dec 2023 13:16:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:98:6f:70:ed:2a:ce:3a:42:46:e9:10:6c:e3:85:7f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Feb 28 14:31:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f5e0b3c18c3396c1652af9e49f909f63a87c6915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9f:4c:1a:fe:1e:05:0d:f6:cf:a9:6e:b6:1d:
f8:45:cb:28:d8:1c:69:8b:ba:6b:9c:f9:d4:77:be:
84:bf:19:d5:06:83:08:fb:3b:6b:c8:b0:bb:fc:ae:
8a:5b:16:41:f1:e3:be:a6:d8:56:1c:de:b7:d9:d0:
a2:9e:e6:2f:9f:13:e3:fa:72:db:b6:d7:33:69:49:
ce:ff:b4:b2:ff:2e:57:95:ef:1e:aa:55:fe:a9:9e:
25:96:76:5f:1a:8f:8f:3e:89:23:aa:0a:c0:ea:ed:
95:60:92:07:08:ba:83:95:6c:9d:88:f3:af:d0:85:
79:63:2f:f8:24:b0:2f:36:aa:f0:38:72:8e:3c:54:
be:d0:b2:8e:f4:c1:23:33:72:24:5b:d9:d2:f8:df:
74:80:af:6e:97:1a:db:79:e5:35:eb:64:2c:97:ae:
3e:cf:ba:c1:a7:ab:82:80:ec:05:32:1b:e2:75:91:
f6:36:55:37:0a:00:de:36:4c:de:4f:9b:ca:c4:5f:
7e:50:aa:69:10:f9:fd:e9:de:68:3c:98:54:b6:f6:
92:fd:b3:75:cf:f9:40:e0:07:1e:e3:73:a2:0f:df:
72:77:db:b3:a9:3f:e1:14:ad:75:d8:15:6b:1e:e9:
32:47:ca:89:a2:cf:cc:bc:c7:79:6f:c6:8a:28:79:
7b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E0:B3:C1:8C:33:96:C1:65:2A:F9:E4:9F:90:9F:63:A8:7C:69:15
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/9eCzwYwzlsFlKvnkn5CfY6h8aRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.87.0/24
45.134.110.0/24
Signature Algorithm: sha256WithRSAEncryption
29:39:20:cc:fa:21:1c:26:44:09:1e:e5:44:2d:21:0a:4d:0d:
86:bb:c5:3a:50:5d:24:de:3e:3a:2e:99:ca:b3:ca:f3:0c:8b:
76:a3:94:12:67:7c:b9:6d:22:b0:13:a5:6d:ab:fa:f4:1b:1e:
f6:2c:1d:9b:5d:b9:fb:3f:97:18:e9:7e:0c:91:1e:14:a5:4d:
24:03:21:e9:1d:27:45:b5:87:b0:49:e0:33:39:cc:3d:23:35:
38:4d:a8:fb:74:4d:58:e2:f1:2d:0c:db:18:42:84:62:b1:f3:
19:7b:c5:22:a3:03:aa:c7:91:34:27:cf:7d:9f:d5:60:7a:49:
95:60:9f:c7:83:11:42:49:45:70:71:85:19:46:b9:76:97:61:
a3:67:91:03:8c:90:35:3f:9c:a3:1c:9c:bf:0c:a0:9b:3d:f2:
bc:41:2e:2c:96:ce:b5:08:fa:af:0d:80:11:3e:5c:3f:5e:e0:
dc:32:f3:41:4e:92:9e:a9:e6:bc:10:5c:6e:50:e8:66:a9:67:
b3:30:9a:da:e0:42:de:d3:cc:9b:f7:4d:98:04:e7:3c:8e:75:
be:be:2b:70:8d:7c:ab:63:35:f0:7c:a8:e2:5a:39:ee:5e:4c:
59:d3:0e:be:bd:c2:bb:c4:0b:d7:89:4e:eb:3c:4d:a7:77:c0:
f2:ba:66:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:13 2024 by rpki-client on console-ams.rpki-client.org